@skrr-ai/cli 0.1.95 → 0.1.96

package/README.md

@@ -15,6 +15,28 @@ skrr whoami
 skrr spaces list --json
 ```
 
+The CLI is the user-facing command; `skrr daemon install` downloads and verifies
+the background runtime when needed. Installing `skrrd` alone does not install
+the CLI. For a user-owned installation without administrator access on macOS
+or Linux, use `npm install -g --prefix "$HOME/.local" @skrr-ai/cli` and add
+`$HOME/.local/bin` to your shell PATH. Verify with `command -v skrr` and
+`skrr --version` in a new terminal.
+
+The desktop app includes the CLI and installs its `skrr` wrapper on launch,
+using its bundled interpreter so no separate Node.js installation is needed.
+If your terminal cannot find it, choose **Help > Set Up skrr Command…**.
+This verifies your shell, offers Unix PATH setup, and can copy the full command.
+Existing commands owned by npm or another installer are preserved. Desktop
+updates maintain the bundled wrapper; npm maintains npm installations.
+
+The script installer sets up both `skrr` and the signed `skrrd` runtime by
+default and requires Node.js 20+ with npm. To repair a machine that already has
+the runtime, run `bash scripts/install-daemon.sh --cli-only` from this checkout.
+Use `--daemon-only` for runtime images without npm. On Windows the equivalent
+runtime-only switch is `$env:SKRR_INSTALL_DAEMON_ONLY='1'` before running
+`install-daemon.ps1`. These installers use a user-owned npm prefix and leave
+the system/global npm configuration unchanged.
+
 `login` first tries a signed-in local daemon, then browser PKCE, then a device code when the callback cannot run. With SSH or no local browser, use `skrr login --device-code`; approve it in a browser on another device. Password, MFA, passkey and configured federation challenges remain on the web sign-in page. The CLI has no password flag.
 
 To create your first Task in an existing Space, copy its ID from `spaces list` and run:

package/dist/commands/agent/message/send.d.ts

@@ -85,6 +85,8 @@ export default class AgentMessageSend extends BaseCommand {
         part: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'message-lint': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         destination: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        to: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        subject: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         channel: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'thread-ts': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'thread-root': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;

package/dist/commands/agent/message/send.js

@@ -114,6 +114,11 @@ class AgentMessageSend extends base_command_1.BaseCommand {
             description: 'Destination kind for the canonical intent',
             options: [...message_intent_1.CANONICAL_DESTINATION_KINDS],
         }),
+        to: core_1.Flags.string({
+            description: 'Recipient email address; repeat for up to 5 recipients',
+            multiple: true,
+        }),
+        subject: core_1.Flags.string({ description: 'Plain email subject (agent_email only)' }),
         channel: core_1.Flags.string({
             description: 'Slack channel ID (only meaningful with --destination slack_channel)',
         }),
@@ -178,6 +183,8 @@ class AgentMessageSend extends base_command_1.BaseCommand {
             agentId: flags.agent,
             text: flags.text,
             destinationKind: flags.destination,
+            recipients: flags.to,
+            subject: flags.subject,
             channelId: flags.channel,
             threadTs: flags['thread-ts'],
             threadRootMessageId: flags['thread-root'],
@@ -497,6 +504,9 @@ class AgentMessageSend extends base_command_1.BaseCommand {
                 },
             });
         }
+        if (request.destination.kind === 'agent_email') {
+            this.error('Agent email is available only through an authorized Agent session.');
+        }
         // slack_owner_dm is a Gateway-only destination: it applies workspace-scoped
         // owner routing that no legacy human transport can enact.
         this.failWithCliError({
@@ -538,6 +548,14 @@ function messageSegmentationAdvisory({ destination, text, followingParts, }) {
  * from one explicit semantic idempotency key.
  */
 function buildSequencedRequests(request, followingParts, hasExplicitIdempotencyKey) {
+    if (request.destination.kind === 'agent_email') {
+        if (followingParts.length)
+            throw invalidIntent('Email accepts one plain-text body; --part is not supported.');
+        requireText(request.content.text, 'content.text', 20 * 1024);
+        if (Buffer.byteLength(request.content.text, 'utf8') > 20 * 1024)
+            throw invalidIntent('Email body exceeds 20 KiB.');
+        return [request];
+    }
     const parts = [request.content.text, ...followingParts].map((part) => requireText(part, 'part'));
     if (parts.length === 1)
         return [request];
@@ -586,6 +604,8 @@ const DELIVERY_FAILURE_STATUSES = new Set([
     'dropped',
     'expired',
     'cancelled',
+    'unknown',
+    'refused',
 ]);
 /**
  * Exit codes for a submitted-but-undelivered message.
@@ -723,8 +743,18 @@ function normalizeIntentPayload({ agentId, jsonBody, merged, }) {
         bodyDestination,
         overlayChannel,
         overlayThreadTs,
+        overlayRecipients: merged.recipients,
+        overlaySubject: merged.subject,
     });
-    const text = requireText(readTextField(jsonBody, merged), 'content.text');
+    const text = requireText(readTextField(jsonBody, merged), 'content.text', destination.kind === 'agent_email' ? 20 * 1024 : MAX_TEXT_CHARS);
+    if (destination.kind === 'agent_email') {
+        if (Buffer.byteLength(text, 'utf8') > 20 * 1024)
+            throw invalidIntent('Email body exceeds 20 KiB.');
+        const forbidden = ['from', 'cc', 'bcc', 'html', 'attachments', 'headers', 'replyTo'];
+        const content = jsonBody.content;
+        if (forbidden.some((key) => jsonBody[key] !== undefined || content?.[key] !== undefined))
+            throw invalidIntent('Agent email accepts plain text only; sender and headers are server-owned.');
+    }
     const idempotencyKey = optionalIdempotencyKey(merged.idempotencyKey ??
         jsonBody.idempotencyKey ??
         jsonBody['idempotency_key'] ??
@@ -778,10 +808,38 @@ function pickDestinationKind({ bodyDestination, overlayKind, }) {
     }
     throw invalidIntent(`destination.kind must be one of ${message_intent_1.CANONICAL_DESTINATION_KINDS.join(', ')} (got "${normalized}").`);
 }
-function buildDestination({ kind, bodyDestination, overlayChannel, overlayThreadTs, }) {
+function buildDestination({ kind, bodyDestination, overlayChannel, overlayThreadTs, overlayRecipients, overlaySubject, }) {
     if (kind === 'app_owner_dm' || kind === 'slack_owner_dm') {
         return { kind };
     }
+    if (kind === 'agent_email') {
+        const source = bodyDestination;
+        if (source &&
+            Object.keys(source).some((key) => !['kind', 'recipients', 'subject'].includes(key))) {
+            throw invalidIntent('agent_email accepts only recipients and subject.');
+        }
+        const rawRecipients = overlayRecipients ?? source?.recipients;
+        if (!Array.isArray(rawRecipients) || rawRecipients.length < 1 || rawRecipients.length > 5) {
+            throw invalidIntent('agent_email requires 1 to 5 recipients.');
+        }
+        const recipients = rawRecipients.map((value) => {
+            if (typeof value !== 'string' ||
+                value.length > 254 ||
+                !/^[^\s@<>]+@[^\s@<>]+\.[^\s@<>]+$/.test(value))
+                throw invalidIntent('Invalid email recipient.');
+            return value.toLowerCase();
+        });
+        if (new Set(recipients).size !== recipients.length)
+            throw invalidIntent('Email recipients must be distinct.');
+        const subject = overlaySubject ?? source?.subject;
+        if (typeof subject !== 'string' ||
+            !subject.trim() ||
+            subject.length > 200 ||
+            // eslint-disable-next-line no-control-regex -- Reject control characters in mail headers.
+            /[\r\n\x00-\x1f\x7f]/.test(subject))
+            throw invalidIntent('Email subject must be a single line of at most 200 characters.');
+        return { kind, recipients: recipients.sort(), subject: subject.trim() };
+    }
     const channelId = optionalString(overlayChannel ?? bodyDestination?.channelId);
     if (!channelId) {
         throw invalidIntent('slack_channel destinations require destination.channelId.');
@@ -905,6 +963,16 @@ function booleanFlagInput(argv, name, parsedValue) {
 }
 function canonicalIntentFromDestination({ agentId, idempotencyKey, destination, text, presentation, notificationPolicy, context, threadRootMessageId, embeds, }) {
     switch (destination.kind) {
+        case 'agent_email':
+            return {
+                protocolVersion: 1,
+                agentId,
+                intentType: 'status_update',
+                destination,
+                content: { text },
+                idempotencyKey,
+                ...(context ? { context } : {}),
+            };
         case 'app_owner_dm':
             return (0, message_intent_1.canonicalAppOwnerDmRequest)({
                 agentId,
@@ -947,13 +1015,13 @@ function resolveAgentInput(argValue, flagValue, merged, jsonBody) {
         { label: 'agentId in JSON input', value: fromBody ?? fromMerged },
     ]);
 }
-function requireText(value, field) {
+function requireText(value, field, maxChars = MAX_TEXT_CHARS) {
     if (typeof value !== 'string' || !value.trim()) {
         throw invalidIntent(`${field} is required.`);
     }
     const normalized = value.trim();
-    if (normalized.length > MAX_TEXT_CHARS) {
-        throw invalidIntent(`${field} must be ${MAX_TEXT_CHARS} characters or less.`);
+    if (normalized.length > maxChars) {
+        throw invalidIntent(`${field} must be ${maxChars} characters or less.`);
     }
     return normalized;
 }
@@ -1043,6 +1111,8 @@ function formatEnvelope(envelope) {
     return `Agent message intent for ${envelope.agent.id} → ${destination}: ${status}${suffix}.${presentation}`;
 }
 function describeDestination(destination) {
+    if (destination.kind === 'agent_email')
+        return `agent_email:${destination.recipients.join(', ')}`;
     if (destination.kind === 'slack_channel') {
         return `slack_channel:${destination.channelId}${destination.threadTs ? `:${destination.threadTs}` : ''}`;
     }

package/dist/commands/agents/chat.js

@@ -594,7 +594,7 @@ class AgentsChat extends base_command_1.BaseCommand {
                     'status is not managed for you. The runtime session is bound to this task for ' +
                     'task context and artifact uploads; use the canonical id above.',
             ].join('\n');
-            if (!flags.jsonl) {
+            if (!flags.jsonl && !flags.json) {
                 this.log(`Bound to task ${task.identifier ?? taskId} (chat turn — task not checked out)`);
             }
         }

package/dist/commands/agents/create.d.ts

@@ -124,9 +124,6 @@ export default class AgentsCreate extends BaseCommand {
         avatar: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'conversation-starter': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'todo-working-hours': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        'reasoning-tool-escape': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        'commitment-responsibility': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        'commitment-responsibility-ceiling': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'max-turns': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'tool-resources': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'install-channel': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;

package/dist/commands/agents/create.js

@@ -280,32 +280,6 @@ class AgentsCreate extends base_command_1.BaseCommand {
             description: 'When this agent schedules its own work: HH:MM-HH:MM[@<IANA timezone>], e.g. ' +
                 '09:00-18:00@America/Los_Angeles',
         }),
-        // Retired (OSK-11975): a Commitment turn works under the Agent's own
-        // permissions. Hidden, warned on use, and never sent (OSK-12068) — see
-        // `mergeAgentConfigFlags`. Kept parseable so an old script still runs.
-        'reasoning-tool-escape': core_1.Flags.string({
-            description: "Retired — has no effect and is not sent. Commitment runs use the agent's own permissions.",
-            options: [...agent_config_1.REASONING_TOOL_ESCAPES],
-            multiple: true,
-            deprecated: { message: (0, agent_config_1.retiredCommitmentPermissionFlagMessage)('reasoning-tool-escape') },
-            hidden: true,
-        }),
-        'commitment-responsibility': core_1.Flags.string({
-            description: "Retired — has no effect and is not sent. Commitment runs use the agent's own permissions.",
-            options: [...agent_config_1.COMMITMENT_RESPONSIBILITY_LEVELS],
-            deprecated: {
-                message: (0, agent_config_1.retiredCommitmentPermissionFlagMessage)('commitment-responsibility'),
-            },
-            hidden: true,
-        }),
-        'commitment-responsibility-ceiling': core_1.Flags.string({
-            description: "Retired — has no effect and is not sent. Commitment runs use the agent's own permissions.",
-            options: [...agent_config_1.COMMITMENT_RESPONSIBILITY_LEVELS],
-            deprecated: {
-                message: (0, agent_config_1.retiredCommitmentPermissionFlagMessage)('commitment-responsibility-ceiling'),
-            },
-            hidden: true,
-        }),
         'max-turns': core_1.Flags.integer({ description: 'Maximum turns in one agent run (1-500)' }),
         'tool-resources': core_1.Flags.string({
             description: 'Tool resources JSON object (file_search / context / image_edit bindings)',

package/dist/commands/agents/egress.d.ts

@@ -0,0 +1,17 @@
+import { BaseCommand } from '../../base-command';
+export default class AgentsEgress extends BaseCommand {
+    static description: string;
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        allow: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        remove: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        repo: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'remove-repo': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        reason: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        clear: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/agents/egress.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../base-command");
+class AgentsEgress extends base_command_1.BaseCommand {
+    static description = 'Show or declare the exact hosts and repositories a hosted agent may use on its next start';
+    static args = { id: core_1.Args.string({ required: true, ignoreStdin: true }) };
+    static flags = {
+        allow: core_1.Flags.string({ multiple: true, exclusive: ['clear'] }),
+        remove: core_1.Flags.string({ multiple: true, exclusive: ['clear'] }),
+        repo: core_1.Flags.string({
+            multiple: true,
+            exclusive: ['clear'],
+            description: 'Allow a repository (owner/name) for Hosted Jobs',
+        }),
+        'remove-repo': core_1.Flags.string({ multiple: true, exclusive: ['clear'] }),
+        reason: core_1.Flags.string({ exclusive: ['clear'] }),
+        clear: core_1.Flags.boolean({
+            exclusive: ['allow', 'remove', 'repo', 'remove-repo', 'reason'],
+            description: 'Delete the whole declaration: hosts and repositories',
+        }),
+        json: core_1.Flags.boolean(),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(AgentsEgress);
+        try {
+            let result = await data_provider_1.dataService.getAgentEgress(args.id);
+            if (flags.clear)
+                result = await data_provider_1.dataService.clearAgentEgress(args.id);
+            else if (flags.allow ||
+                flags.remove ||
+                flags.repo ||
+                flags['remove-repo'] ||
+                flags.reason !== undefined) {
+                const remove = new Set((0, data_provider_1.normalizeAgentEgressHosts)(flags.remove || []));
+                const hosts = (0, data_provider_1.normalizeAgentEgressHosts)([
+                    ...(result.declaration?.hosts || []),
+                    ...(flags.allow || []),
+                ]).filter((host) => !remove.has(host));
+                // Repositories are sent only when this call changes them, so a hosts-only
+                // edit can never rewrite a list another surface set.
+                const touchesRepositories = Boolean(flags.repo || flags['remove-repo']);
+                const removeRepos = new Set((0, data_provider_1.normalizeAgentRepositories)(flags['remove-repo'] || []));
+                const repositories = touchesRepositories
+                    ? (0, data_provider_1.normalizeAgentRepositories)([
+                        ...(result.declaration?.repositories || []),
+                        ...(flags.repo || []),
+                    ]).filter((repository) => !removeRepos.has(repository))
+                    : undefined;
+                result = await data_provider_1.dataService.setAgentEgress(args.id, {
+                    hosts,
+                    ...(repositories ? { repositories } : {}),
+                    ...(flags.reason !== undefined ? { reason: flags.reason } : {}),
+                });
+            }
+            if (flags.json) {
+                this.log(JSON.stringify(result, null, 2));
+                return;
+            }
+            const repositories = result.declaration?.repositories;
+            this.log(repositories?.length
+                ? `Repositories: ${repositories.join(', ')} (Hosted Jobs and Commitment deliveries may use only these; git_commit push is not enabled in production turns and, when enabled, is bounded by them too; raw git in a shell is not limited by it)`
+                : 'Repositories: none declared (no restriction)');
+            if (!('policy' in result.effective)) {
+                this.log('Effective network unavailable: the workspace policy could not be read.');
+                this.log(data_provider_1.AGENT_EGRESS_EXPLANATION);
+                return;
+            }
+            this.log(`Network: ${result.effective.policy} (${result.effective.source}; ${result.effective.hosts.length} hosts)`);
+            this.log(result.effective.hosts.join(', '));
+            if (result.effective.droppedHosts.length)
+                this.log(`Workspace policy dropped: ${result.effective.droppedHosts.join(', ')}`);
+            if (result.effective.unreadable)
+                this.log('Declaration or ceiling unreadable: baseline only.');
+            this.log(data_provider_1.AGENT_EGRESS_EXPLANATION);
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = AgentsEgress;

package/dist/commands/agents/mailbox/messages.d.ts

@@ -0,0 +1,14 @@
+import { MailboxHumanCommand } from '../../../lib/mailbox-human-command';
+export default class AgentsMailboxMessages extends MailboxHumanCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        limit: import("@oclif/core/lib/interfaces").OptionFlag<number, import("@oclif/core/lib/interfaces").CustomOptions>;
+        cursor: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/agents/mailbox/messages.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const mailbox_human_command_1 = require("../../../lib/mailbox-human-command");
+const agent_mailbox_1 = require("../../../lib/agent-mailbox");
+class AgentsMailboxMessages extends mailbox_human_command_1.MailboxHumanCommand {
+    static description = 'List received mailbox message metadata (human operator only; view content in agent settings)';
+    static examples = [
+        '<%= config.bin %> agents mailbox messages <agent-id> --json',
+        '<%= config.bin %> agents mailbox messages <agent-id> --limit 25 --cursor <cursor>',
+    ];
+    static args = {
+        id: core_1.Args.string({ description: 'Agent ID', required: true, ignoreStdin: true }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output message metadata and nextCursor as JSON' }),
+        limit: core_1.Flags.integer({
+            description: 'Messages per page (1–100)',
+            default: 25,
+            min: 1,
+            max: 100,
+        }),
+        cursor: core_1.Flags.string({ description: 'Opaque nextCursor from a previous page' }),
+    };
+    async run() {
+        this.requireHumanMailboxAuth();
+        const { args, flags } = await this.parse(AgentsMailboxMessages);
+        let result;
+        try {
+            result = await (0, agent_mailbox_1.getAgentMailboxMessageMetadata)(args.id, {
+                limit: flags.limit,
+                cursor: flags.cursor,
+            });
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+        if (flags.json) {
+            this.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        if (result.data.length === 0)
+            this.log('No received messages on this page.');
+        for (const message of result.data) {
+            this.log(`${message.id}  ${message.receivedAt}  ${message.classification}  ${message.status}`);
+        }
+        if (result.nextCursor)
+            this.log(`Next cursor: ${result.nextCursor}`);
+        this.log('Read mail content in the mailbox tab in agent settings.');
+    }
+}
+exports.default = AgentsMailboxMessages;

package/dist/commands/agents/mailbox/show.d.ts

@@ -0,0 +1,13 @@
+import { MailboxHumanCommand } from '../../../lib/mailbox-human-command';
+export default class AgentsMailboxShow extends MailboxHumanCommand {
+    static description: string;
+    static aliases: string[];
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/agents/mailbox/show.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const mailbox_human_command_1 = require("../../../lib/mailbox-human-command");
+const agent_mailbox_1 = require("../../../lib/agent-mailbox");
+class AgentsMailboxShow extends mailbox_human_command_1.MailboxHumanCommand {
+    static description = "Show an agent's mailbox status and address (human operator only)";
+    static aliases = ['agents:mailbox:status'];
+    static examples = [
+        '<%= config.bin %> agents mailbox show <agent-id>',
+        '<%= config.bin %> agents mailbox status <agent-id> --json',
+    ];
+    static args = {
+        id: core_1.Args.string({ description: 'Agent ID', required: true, ignoreStdin: true }),
+    };
+    static flags = { json: core_1.Flags.boolean({ description: 'Output metadata as JSON' }) };
+    async run() {
+        this.requireHumanMailboxAuth();
+        const { args, flags } = await this.parse(AgentsMailboxShow);
+        let result;
+        try {
+            result = await (0, agent_mailbox_1.getAgentMailboxMetadata)(args.id);
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+        if (flags.json) {
+            this.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        const receiving = result.receivingRuntime?.status;
+        this.log(receiving === 'running'
+            ? 'Incoming processing: running (DNS and SMTP delivery are not verified by this command).'
+            : receiving === 'starting'
+                ? 'Incoming processing: starting. Refresh before using a recovery address.'
+                : receiving === 'unavailable'
+                    ? 'Incoming processing: unavailable. Do not use this address for account recovery until receiving is restored.'
+                    : 'Incoming processing: unverified. Refresh before using a recovery address.');
+        if (!result.mailbox) {
+            this.log('No mailbox provisioned. Configure the mailbox in the agent settings.');
+            return;
+        }
+        this.log(`Address: ${result.mailbox.address}`);
+        this.log(`Address lifecycle: ${result.mailbox.status}`);
+        this.log(`Sending: ${result.mailbox.sending}`);
+        if (result.mailbox.sendingPausedReason) {
+            this.log(`Sending paused: ${result.mailbox.sendingPausedReason}`);
+        }
+        this.log(`Version: ${result.mailbox.version}`);
+    }
+}
+exports.default = AgentsMailboxShow;

package/dist/commands/agents/operating-plan.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const data_provider_1 = require("@skrr-ai/data-provider");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const roles_1 = require("../../lib/roles");
@@ -26,6 +27,13 @@ class AgentOperatingPlan extends base_command_1.BaseCommand {
                 this.log(`  Responsibility: ${r.purpose}`);
                 this.log(`  Evidence: ${r.evidence.status}${r.evidence.issues?.length ? ` (${r.evidence.issues.join(', ')})` : ''}`);
                 this.log("  Execution authority: tools, sandbox and approvals use the Agent's runtime permissions.");
+                for (const observation of r.evidenceAuthority?.observations || []) {
+                    const comparison = (0, data_provider_1.describeObservationChange)({
+                        ...observation.serverComparison,
+                        changeReason: observation.serverComparison.reason,
+                    });
+                    this.log(`  Observation: ${observation.key} — ${comparison.reason}${comparison.progress ? ` ${comparison.progress}` : ''}${comparison.reference ? `; ${comparison.reference}` : ''} (AGENT-REPORTED)`);
+                }
                 for (const q of r.inquiries)
                     this.log(`  Inquiry: ${q.question} [${q.status}] — ${q.decisionImpact}`);
                 for (const w of r.work)

package/dist/commands/agents/roles/capture.d.ts

@@ -0,0 +1,16 @@
+import { BaseCommand } from '../../../base-command';
+export default class RolesCapture extends BaseCommand {
+    static description: string;
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        key: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        title: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        commitment: import("@oclif/core/lib/interfaces").OptionFlag<string[], import("@oclif/core/lib/interfaces").CustomOptions>;
+        compass: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        output: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/agents/roles/capture.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const node_fs_1 = require("node:fs");
+const base_command_1 = require("../../../base-command");
+const roles_1 = require("../../../lib/roles");
+class RolesCapture extends base_command_1.BaseCommand {
+    static description = 'Capture selected owner responsibilities as a portable role draft with explicit omissions';
+    static args = {
+        id: core_1.Args.string({ required: true, ignoreStdin: true, description: 'Agent ID' }),
+    };
+    static flags = {
+        key: core_1.Flags.string({ required: true, description: 'Portable role key' }),
+        title: core_1.Flags.string({ required: true, description: 'Role title' }),
+        commitment: core_1.Flags.string({
+            required: true,
+            multiple: true,
+            description: 'Responsibility ID (repeat for each)',
+        }),
+        compass: core_1.Flags.string({ description: 'Compass to capture' }),
+        output: core_1.Flags.string({ description: 'Save portable spec JSON for review' }),
+        json: core_1.Flags.boolean({ description: 'Output draft and omissions as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(RolesCapture);
+        try {
+            const result = await roles_1.roleApi.capture(args.id, {
+                key: flags.key,
+                title: flags.title,
+                commitmentIds: flags.commitment,
+                ...(flags.compass ? { compassId: flags.compass } : {}),
+            });
+            if (flags.output)
+                (0, node_fs_1.writeFileSync)(flags.output, `${JSON.stringify(result.spec, null, 2)}\n`, { mode: 0o600 });
+            if (flags.json) {
+                this.log(JSON.stringify(result, null, 2));
+                return;
+            }
+            this.log(`Captured ${result.spec.title}; review before installation.`);
+            for (const omission of result.omitted)
+                this.log(`Omitted ${omission.responsibilityKey || 'role'}.${omission.field}: ${omission.reason}`);
+            for (const prerequisite of result.prerequisites)
+                this.log(prerequisite);
+            if (flags.output)
+                this.log(`Portable draft saved to ${flags.output}.`);
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = RolesCapture;

package/dist/commands/agents/roles/install.d.ts

@@ -6,6 +6,7 @@ export default class RolesInstall extends BaseCommand {
     };
     static flags: {
         preview: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'confirm-rule-conflict': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;

package/dist/commands/agents/roles/install.js

@@ -13,6 +13,10 @@ class RolesInstall extends base_command_1.BaseCommand {
             required: true,
             description: 'Server-generated preview JSON saved by agents roles preview',
         }),
+        'confirm-rule-conflict': core_1.Flags.string({
+            multiple: true,
+            description: 'Rule id the role revision changed or removes and you also edited: overwrite or delete your edit (shown as conflicts_with_owner_edit or removed_owner_edited in the preview)',
+        }),
         json: core_1.Flags.boolean({ description: 'Output the installation receipt as JSON' }),
     };
     async run() {
@@ -21,7 +25,10 @@ class RolesInstall extends base_command_1.BaseCommand {
         try {
             const preview = (0, roles_1.readRoleJson)(flags.preview);
             (0, roles_1.assertRolePreview)(preview);
-            const receipt = await roles_1.roleApi.install(args.id, preview);
+            const confirmed = flags['confirm-rule-conflict'] ?? [];
+            const receipt = confirmed.length
+                ? await roles_1.roleApi.install(args.id, preview, confirmed)
+                : await roles_1.roleApi.install(args.id, preview);
             if (flags.json)
                 this.log(JSON.stringify(receipt, null, 2));
             else {

package/dist/commands/agents/roles/preview.d.ts

@@ -6,6 +6,8 @@ export default class RolesPreview extends BaseCommand {
     };
     static flags: {
         file: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        params: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        endpoints: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         bindings: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         output: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;